Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/3137372e38372e3130392e302f32342d3234203d3e203532353934.roa
File:                     3137372e38372e3130392e302f32342d3234203d3e203532353934.roa (raw, json)
Hash identifier:          Pi1Hj70xfayHO/THpyYWweQLR6PXFRit/h5/NdH58aY=
Subject key identifier:   37:F7:79:A9:E1:1F:83:85:BA:91:DD:90:26:D4:77:E6:A2:2D:B9:3C
Certificate issuer:       /CN=A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877
Certificate serial:       070816C41C0A26648BE7F6EB66E4BE13B44972A1
Authority key identifier: A5:9A:BE:7B:06:BA:78:CB:C1:B5:62:CF:C8:A8:90:C3:9B:BA:C8:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/3137372e38372e3130392e302f32342d3234203d3e203532353934.roa
Signing time:             Fri 26 May 2023 14:00:31 +0000
ROA not before:           Fri 26 May 2023 13:55:31 +0000
ROA not after:            Fri 24 May 2024 14:00:31 +0000
asID:                     52594
IP address blocks:        177.87.109.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:08:16:c4:1c:0a:26:64:8b:e7:f6:eb:66:e4:be:13:b4:49:72:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877
        Validity
            Not Before: May 26 13:55:31 2023 GMT
            Not After : May 24 14:00:31 2024 GMT
        Subject: CN=37F779A9E11F8385BA91DD9026D477E6A22DB93C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:f2:91:72:b0:68:ed:9f:49:d8:38:a7:f1:
                    bb:7b:ed:2b:f1:c0:6c:db:72:3e:f8:15:e0:c6:27:
                    82:02:4d:21:23:a2:cb:96:f6:ec:00:14:98:35:e9:
                    69:9d:42:63:6c:83:4e:1c:0c:ef:cf:96:b7:86:eb:
                    7b:f1:51:42:0d:cb:23:c8:ae:cd:30:96:f9:ab:e6:
                    4f:e3:76:32:62:49:33:8c:66:b8:35:59:c6:57:ba:
                    2e:84:bf:82:b3:85:a4:fa:08:19:c4:25:e2:46:b3:
                    8b:e4:ff:e0:26:4a:dd:c1:af:b5:f2:78:54:19:c0:
                    aa:60:d7:b8:07:86:ac:15:a1:6d:a6:14:f4:c4:de:
                    de:74:2e:1e:61:f9:d6:5c:c9:46:ef:22:74:90:00:
                    02:ec:6b:f1:42:5f:f9:92:87:94:09:4f:29:7a:7c:
                    d0:14:9c:2e:a3:37:75:3b:b0:4b:5e:7f:a2:d0:e0:
                    d2:a6:f3:5c:58:0b:9c:84:27:50:eb:bf:ce:86:d8:
                    c3:24:0a:9c:1c:86:1e:22:c9:e5:96:35:63:55:87:
                    12:02:30:f6:e4:0c:9f:10:47:b0:b2:8d:95:ef:45:
                    7e:5c:08:e6:58:f0:1b:0a:d9:91:82:6c:98:09:ab:
                    4e:bf:08:f3:2f:53:cc:2f:fd:cb:3e:d9:58:e7:5a:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F7:79:A9:E1:1F:83:85:BA:91:DD:90:26:D4:77:E6:A2:2D:B9:3C
            X509v3 Authority Key Identifier:
                keyid:A5:9A:BE:7B:06:BA:78:CB:C1:B5:62:CF:C8:A8:90:C3:9B:BA:C8:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/3137372e38372e3130392e302f32342d3234203d3e203532353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:31:2d:b7:e6:a5:a7:dc:7c:4c:a0:fc:0e:63:de:2f:76:ce:
         b0:bf:64:40:7d:9b:fa:cf:8b:cc:9e:51:2c:67:55:1e:bf:0e:
         1d:00:3a:24:ef:d9:84:d6:54:d8:c3:bd:41:bf:a6:43:23:08:
         aa:63:71:66:d6:c3:e2:9b:03:43:46:02:ae:64:b7:10:79:28:
         65:5d:fb:0f:b4:0d:17:e6:a7:a0:09:3b:86:29:88:27:e3:de:
         aa:87:87:5c:f4:af:fa:5d:7c:92:06:81:26:f5:6e:9f:2f:c4:
         0e:79:50:dc:b9:65:4a:56:3c:37:06:13:6c:88:7e:e2:2a:70:
         2a:44:06:33:73:c3:64:7d:d6:43:ad:d9:81:2a:15:b3:46:b1:
         cd:ed:ae:b0:f0:4f:e9:f0:0c:0f:d6:42:bd:dd:0e:8e:aa:6a:
         56:db:b4:2e:d5:42:83:09:9f:15:44:c4:91:bd:9b:14:7f:3a:
         0d:6c:b5:ab:17:45:2a:28:84:fb:25:c5:ab:39:43:50:ed:ed:
         f0:c7:59:87:d6:b6:4d:b3:55:c7:9c:0e:85:ca:32:5b:87:51:
         f1:de:a8:d3:a9:f8:95:bd:f5:5d:1b:ef:ee:65:bc:69:38:23:
         b1:98:69:d6:db:6c:b9:f5:14:c5:6a:b7:e5:63:a4:f4:27:3b:
         ca:a5:72:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:52 2025 by rpki-client